Attackers Compromise Popular Rust Package to Distribute Malware During Build

Threat actors gained control of the maintainer account for arrayref, a widely deployed Rust crate, and injected malicious code that executed on…

Development teams should urgently review arrayref usage in projects and audit installed versions. Implement additional controls in your build pipeline, maintain Rust ecosystem security updates, and consider using dependency scanning tools to detect suspicious changes in critical packages.